Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/58d15b-9f02-42c4-b02d-a01eea65fd33/1/Cani7ovOptW5GcSjPSbZu_mCqEM.mft
File: Cani7ovOptW5GcSjPSbZu_mCqEM.mft (raw, json)
Hash identifier: S7nTNQH4LwR1CvL0qWGgGAT5naRrfF81zIXzbmQf3Sw=
Subject key identifier: 0E:7E:C4:EB:A8:41:9E:45:DF:24:1C:C0:66:50:4F:AF:26:D7:77:DC
Authority key identifier: 09:A9:E2:EE:8B:CE:A6:D5:B9:19:C4:A3:3D:26:D9:BB:F9:82:A8:43
Certificate issuer: /CN=09a9e2ee8bcea6d5b919c4a33d26d9bbf982a843
Certificate serial: 019683234671EB7F9BD6EB8A69A2C852ADCD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cani7ovOptW5GcSjPSbZu_mCqEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/58d15b-9f02-42c4-b02d-a01eea65fd33/1/Cani7ovOptW5GcSjPSbZu_mCqEM.mft
Manifest number: 0994
Signing time: Tue 29 Apr 2025 20:00:49 +0000
Manifest this update: Tue 29 Apr 2025 20:00:49 +0000
Manifest next update: Wed 30 Apr 2025 20:00:49 +0000
Files and hashes: 1: Cani7ovOptW5GcSjPSbZu_mCqEM.crl (hash: ALP+s2gn9Uh8v/dlDw1yWKQ5MyYRsbLRRJ2n3x1WBaA=)
2: VNahP0UQveZ8aD0TsmaExJY0tZA.roa (hash: mRQeMIIWNprrsGatyNnULZeqD9q6svl4Pj1uiYVKUX8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/58d15b-9f02-42c4-b02d-a01eea65fd33/1/Cani7ovOptW5GcSjPSbZu_mCqEM.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/58d15b-9f02-42c4-b02d-a01eea65fd33/1/Cani7ovOptW5GcSjPSbZu_mCqEM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cani7ovOptW5GcSjPSbZu_mCqEM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 20:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:83:23:46:71:eb:7f:9b:d6:eb:8a:69:a2:c8:52:ad:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09a9e2ee8bcea6d5b919c4a33d26d9bbf982a843
Validity
Not Before: Apr 29 20:00:49 2025 GMT
Not After : Apr 30 20:00:49 2025 GMT
Subject: CN=0e7ec4eba8419e45df241cc066504faf26d777dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:90:47:28:52:31:02:bb:1e:9d:35:9e:10:04:
c2:c9:72:19:63:84:44:68:9b:3e:8d:c7:b3:94:d0:
96:86:c5:e1:b5:ab:c3:ee:e2:c9:53:10:71:93:0c:
00:9f:14:29:5b:db:2f:17:84:be:13:8e:27:ed:db:
65:13:86:45:ff:a7:7a:52:94:9e:a6:d0:42:ca:35:
9c:99:0d:ae:da:94:4d:8d:6c:14:6d:d4:61:0b:0d:
18:49:ab:f2:33:5a:30:00:12:76:20:e1:10:d1:dc:
0b:46:26:96:17:2d:16:18:af:3c:a2:83:5b:5f:2c:
21:f2:ab:86:d7:6a:63:cc:f2:dc:55:b3:80:50:51:
2d:f0:0a:64:42:0f:9a:8b:5d:3e:6d:fb:de:bf:9d:
a8:7b:83:87:07:64:4a:0e:c4:1a:b3:40:5a:71:a7:
9e:a1:ad:28:7b:b1:96:51:9a:00:1a:1f:c5:29:7e:
46:ca:bc:9e:d0:86:69:d8:a5:c5:23:0d:98:79:47:
18:c2:5d:04:47:f4:2e:54:3f:7e:3b:14:dd:7a:31:
6a:60:03:ee:c8:71:3c:46:55:0a:c4:78:c1:5d:c4:
6c:21:fb:de:ac:62:15:8e:9b:39:86:15:72:f7:75:
bd:4f:15:f7:5f:c9:36:12:bb:27:aa:ec:24:84:78:
35:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:7E:C4:EB:A8:41:9E:45:DF:24:1C:C0:66:50:4F:AF:26:D7:77:DC
X509v3 Authority Key Identifier:
keyid:09:A9:E2:EE:8B:CE:A6:D5:B9:19:C4:A3:3D:26:D9:BB:F9:82:A8:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cani7ovOptW5GcSjPSbZu_mCqEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/58d15b-9f02-42c4-b02d-a01eea65fd33/1/Cani7ovOptW5GcSjPSbZu_mCqEM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/58d15b-9f02-42c4-b02d-a01eea65fd33/1/Cani7ovOptW5GcSjPSbZu_mCqEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:3a:66:3e:aa:0d:0e:9a:44:81:8e:e8:ea:6b:a7:b6:d5:1a:
5c:1b:2d:17:9c:b5:f2:43:64:04:35:71:28:d4:a6:32:cb:d5:
47:f1:2c:85:d4:0a:6d:7c:e9:66:cf:9e:3e:e7:96:37:08:25:
b3:e7:5a:fc:6a:e8:f8:a6:dc:2c:53:fd:c9:aa:48:8d:d9:d5:
90:ff:41:b3:97:f1:47:2a:64:95:5c:05:58:97:b1:5e:ae:cc:
e6:4d:66:58:50:8a:00:7e:aa:d8:a7:ba:25:2d:3e:c3:ba:35:
17:4b:5d:6c:82:be:b5:dc:7d:9d:bc:53:6e:80:83:19:7a:c1:
62:65:72:04:5c:19:d4:c8:24:6c:86:28:10:30:3d:7d:f8:2d:
18:93:02:44:f5:49:7f:d4:c7:c0:c0:a1:9b:36:5b:6d:e9:0b:
16:d9:0c:e2:34:50:cb:cd:36:6f:dc:3e:59:90:70:3c:88:98:
64:63:7a:06:93:37:f0:18:55:b7:03:71:43:c4:f7:5b:2d:a3:
bc:f7:02:f8:44:57:0a:5a:f4:a1:67:8d:92:f9:b5:e5:43:53:
34:da:91:6b:e9:36:1f:f4:89:71:b8:87:60:a1:3d:e9:8e:92:
80:73:a6:45:46:9a:56:d0:eb:47:32:7c:7d:c2:3c:72:23:04:
81:31:f4:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 04:25:28 2025 by rpki-client